From 96c407d7672f8e0f9103ca61e927197e4f6df54f Mon Sep 17 00:00:00 2001
From: Tom Hu <tom.hu@harness.io>
Date: Fri, 7 Aug 2026 15:42:27 -0700
Subject: [PATCH] chore(security): bump rexml past high advisory

Pin rexml >= 3.3.6 and refresh Gemfile.lock (3.4.4).
---
 Gemfile      | 1 +
 Gemfile.lock | 3 ++-
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/Gemfile b/Gemfile
index 832c52d..471cfa3 100644
--- a/Gemfile
+++ b/Gemfile
@@ -4,3 +4,4 @@ source 'https://rubygems.org'
 
 gem 'bashcov'
 gem 'simplecov-cobertura'
+gem 'rexml', '>= 3.3.6'
diff --git a/Gemfile.lock b/Gemfile.lock
index 6d41e6e..985e0d0 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -4,7 +4,7 @@ GEM
     bashcov (1.8.1)
       simplecov (~> 0.15)
     docile (1.3.5)
-    rexml (3.2.6)
+    rexml (3.4.4)
     simplecov (0.21.2)
       docile (~> 1.1)
       simplecov-html (~> 0.11)
@@ -20,6 +20,7 @@ PLATFORMS
 
 DEPENDENCIES
   bashcov
+  rexml (>= 3.3.6)
   simplecov-cobertura
 
 BUNDLED WITH